This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json) Hash identifier: 2X0kJremxdLPYj3KGyl/mdQKuUkPansg8YO4RHGH8YA= Subject key identifier: 1D:11:CB:22:C4:84:99:09:24:8E:19:7D:3D:4F:6D:18:6E:9D:FF:33 Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42 Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42 Certificate serial: 019AF0BF7418EAF50C120F87D6D37AA06852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft Manifest number: 06AF Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: hluoYsPb5GpWvnyFXOF4qu9g61v4HaFMxOGJZahQqpw=) 2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:74:18:ea:f5:0c:12:0f:87:d6:d3:7a:a0:68:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42 Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=1d11cb22c4849909248e197d3d4f6d186e9dff33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:66:40:aa:42:a4:f1:60:7d:d4:62:10:f0:94: 9e:31:f4:3e:cd:55:ba:ff:2e:70:c7:c1:44:04:be: 69:fc:3d:f6:9c:3d:5b:97:7e:b2:7f:91:19:ab:07: ab:7a:0c:8c:7d:0f:43:9f:04:b1:9b:32:cd:45:13: c1:53:25:3b:0e:35:ab:91:ce:db:1b:e0:3f:ac:3e: ae:d8:ac:b8:dd:dc:13:32:a5:46:ac:72:49:f3:04: 0f:c4:5c:75:84:04:dc:8a:af:ef:92:c8:a8:37:22: 45:77:ab:fd:06:ae:d9:96:b4:29:6c:d8:45:bc:ac: 9a:66:de:21:ec:c8:3a:97:ce:fa:6b:e3:5a:cb:86: 91:e9:bb:40:b0:c3:ec:71:5d:9a:36:af:da:87:e8: a2:b7:58:13:34:82:71:08:18:c1:4c:87:6c:d1:4b: 5b:fe:1b:17:59:8a:1f:fc:7a:12:44:68:6e:69:8d: eb:af:cd:9c:78:b1:51:5b:8b:34:71:2e:69:83:e9: 9f:11:c1:6f:86:df:fa:75:a1:36:3b:0f:22:0b:04: fe:bc:2e:6d:4f:b8:c4:81:eb:31:ce:71:8c:90:0b: 9c:5f:6f:11:a5:f5:44:0a:29:a1:ef:cd:58:24:bf: 6f:8d:6e:fa:98:44:bb:f6:b9:28:4e:e4:73:f6:33: 4f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:11:CB:22:C4:84:99:09:24:8E:19:7D:3D:4F:6D:18:6E:9D:FF:33 X509v3 Authority Key Identifier: keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:22:cb:53:62:2e:51:fd:58:1d:00:35:6d:da:c1:49:1a:1b: c8:db:b6:27:c3:6e:11:16:90:87:81:18:58:28:1e:72:4d:51: 4d:06:92:fe:cb:9b:11:3a:1c:b6:54:a5:ad:2c:33:4b:f9:91: 16:28:93:72:5c:cd:7a:10:78:5f:25:e7:29:1a:b0:4d:e9:94: a2:e4:46:d6:78:25:8b:6b:83:af:35:2d:60:a4:a0:59:75:4d: 91:24:72:60:ea:9a:35:e5:79:4b:c0:82:f7:bf:7e:e4:05:23: 7e:8b:68:40:0b:1a:7d:c1:0c:75:e0:b3:a1:98:60:41:3e:0f: b0:a9:28:b7:35:7c:2c:45:d0:56:96:98:58:58:9d:4a:5f:57: 64:5c:7e:9f:2b:12:74:09:8f:2f:0d:51:3f:ce:8e:7f:76:33: 7c:da:41:6f:ec:a6:f3:5b:34:66:a2:19:6f:ea:f3:4c:23:44: 22:d9:4f:1a:cf:ba:c2:48:1e:f1:03:7a:64:a1:8f:e7:c1:11: b3:22:be:a5:8e:9a:45:63:bc:10:5b:09:fd:8a:c7:54:9c:d7: 0e:7f:89:3d:a4:1f:e9:ba:af:04:53:21:6c:65:cb:0e:aa:6e: f7:11:67:f2:dc:43:93:df:a1:1f:b4:7c:91:9b:e2:ca:93:de: 0f:93:cf:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3QY6vUMEg+H1tN6oGhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh MzBhNDIwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EygxZDExY2IyMmM0ODQ5OTA5MjQ4ZTE5N2QzZDRmNmQxODZlOWRmZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimZAqkKk8WB91GIQ8JSeMfQ+zVW6 /y5wx8FEBL5p/D32nD1bl36yf5EZqweregyMfQ9DnwSxmzLNRRPBUyU7DjWrkc7b G+A/rD6u2Ky43dwTMqVGrHJJ8wQPxFx1hATciq/vksioNyJFd6v9Bq7ZlrQpbNhF vKyaZt4h7Mg6l876a+Nay4aR6btAsMPscV2aNq/ah+iit1gTNIJxCBjBTIds0Utb /hsXWYof/HoSRGhuaY3rr82ceLFRW4s0cS5pg+mfEcFvht/6daE2Ow8iCwT+vC5t T7jEgesxznGMkAucX28RpfVECimh781YJL9vjW76mES79rkoTuRz9jNPSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0RyyLEhJkJJI4ZfT1PbRhunf8zMB8GA1UdIwQY MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt Mjg0MTAxM2JjY2I0LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0 LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyLLU2Iu Uf1YHQA1bdrBSRobyNu2J8NuERaQh4EYWCgeck1RTQaS/subEToctlSlrSwzS/mR FiiTclzNehB4XyXnKRqwTemUouRG1ngli2uDrzUtYKSgWXVNkSRyYOqaNeV5S8CC 979+5AUjfotoQAsafcEMdeCzoZhgQT4PsKkotzV8LEXQVpaYWFidSl9XZFx+nysS dAmPLw1RP86Of3YzfNpBb+ym81s0ZqIZb+rzTCNEItlPGs+6wkge8QN6ZKGP58ER syK+pY6aRWO8EFsJ/YrHVJzXDn+JPaQf6bqvBFMhbGXLDqpu9xFn8txDk9+hH7R8 kZviypPeD5PPww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:20 2025 by rpki-client